SERVFAIL on one Domain (NO unbound)

Help
26 
@raspberrypi:~ $ sudo cat /var/log/pihole.log | grep -A2 .mil
Jun  9 13:18:17 dnsmasq[1356]: query[A] owa.us.af.mil from 192.168.2.88
Jun  9 13:18:17 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.222.222
Jun  9 13:18:17 dnsmasq[1356]: query[A] owa.us.af.mil from 192.168.2.88
Jun  9 13:18:17 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.220.220
Jun  9 13:18:17 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.222.222
Jun  9 13:18:17 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:18:17 dnsmasq[1356]: query[A] archive.org from 192.168.2.88
--
Jun  9 13:18:22 dnsmasq[1356]: query[A] owa.us.af.mil from 192.168.2.88
Jun  9 13:18:22 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.220.220
Jun  9 13:18:22 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.222.222
Jun  9 13:18:22 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.220.220
Jun  9 13:18:22 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:18:22 dnsmasq[1356]: query[A] google.com from 192.168.2.88
--
Jun  9 13:18:27 dnsmasq[1356]: query[A] owa.us.af.mil from 192.168.2.88
Jun  9 13:18:27 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.220.220
Jun  9 13:18:27 dnsmasq[1356]: query[A] owa.us.af.mil from 192.168.2.88
Jun  9 13:18:27 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.222.222
Jun  9 13:18:27 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.220.220
Jun  9 13:18:27 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:18:27 dnsmasq[1356]: query[A] google.com from 192.168.2.88
--
Jun  9 13:18:41 dnsmasq[1356]: query[A] owa.us.af.mil from 192.168.2.88
Jun  9 13:18:41 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.222.222
Jun  9 13:18:41 dnsmasq[1356]: query[A] owa.us.af.mil from 192.168.2.88
Jun  9 13:18:41 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.220.220
Jun  9 13:18:41 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.222.222
Jun  9 13:18:41 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:18:41 dnsmasq[1356]: query[A] nav.smartscreen.microsoft.com from 192.168.2.88
--
Jun  9 13:18:49 dnsmasq[1356]: query[A] web-satx02.mail.mil from 192.168.2.88
Jun  9 13:18:49 dnsmasq[1356]: forwarded web-satx02.mail.mil to 208.67.222.222
Jun  9 13:18:49 dnsmasq[1356]: query[A] web-satx02.mail.mil from 192.168.2.88
Jun  9 13:18:49 dnsmasq[1356]: forwarded web-satx02.mail.mil to 208.67.220.220
Jun  9 13:18:49 dnsmasq[1356]: forwarded web-satx02.mail.mil to 208.67.222.222
Jun  9 13:18:49 dnsmasq[1356]: reply web-satx02.mail.mil is 156.112.68.61
Jun  9 13:18:50 dnsmasq[1356]: query[A] img-s-msn-com.akamaized.net from 192.168.2.88
Jun  9 13:18:50 dnsmasq[1356]: forwarded img-s-msn-com.akamaized.net to 208.67.220.220
--
Jun  9 13:18:50 dnsmasq[1356]: query[A] crl.disa.mil from 192.168.2.88
Jun  9 13:18:50 dnsmasq[1356]: forwarded crl.disa.mil to 208.67.220.220
Jun  9 13:18:50 dnsmasq[1356]: query[A] crl.disa.mil from 192.168.2.88
Jun  9 13:18:50 dnsmasq[1356]: forwarded crl.disa.mil to 208.67.222.222
Jun  9 13:18:50 dnsmasq[1356]: forwarded crl.disa.mil to 208.67.220.220
Jun  9 13:18:50 dnsmasq[1356]: reply crl.disa.mil is <CNAME>
Jun  9 13:18:50 dnsmasq[1356]: reply crl.disa.mil.apps.gcds.disa.mil is <CNAME>
Jun  9 13:18:50 dnsmasq[1356]: reply crl.disa.mil.edgekey.net is <CNAME>
Jun  9 13:18:50 dnsmasq[1356]: reply e15113.dscf.akamaiedge.net is 184.27.147.230
Jun  9 13:18:50 dnsmasq[1356]: query[A] bing.com from 192.168.2.88
--
Jun  9 13:19:16 dnsmasq[1356]: query[A] my.af.mil from 192.168.2.88
Jun  9 13:19:16 dnsmasq[1356]: forwarded my.af.mil to 208.67.220.220
Jun  9 13:19:16 dnsmasq[1356]: query[A] my.af.mil from 192.168.2.88
Jun  9 13:19:16 dnsmasq[1356]: forwarded my.af.mil to 208.67.222.222
Jun  9 13:19:16 dnsmasq[1356]: forwarded my.af.mil to 208.67.220.220
Jun  9 13:19:16 dnsmasq[1356]: reply my.af.mil is 164.235.24.208
Jun  9 13:19:16 dnsmasq[1356]: reply my.af.mil is 164.235.4.208
Jun  9 13:19:17 dnsmasq[1356]: query[A] watson.telemetry.microsoft.com from 192.168.2.88
Jun  9 13:19:17 dnsmasq[1356]: gravity blocked watson.telemetry.microsoft.com is 192.168.2.196
--
Jun  9 13:19:20 dnsmasq[1356]: query[A] web-mech01.mail.mil from 192.168.2.88
Jun  9 13:19:20 dnsmasq[1356]: forwarded web-mech01.mail.mil to 208.67.220.220
Jun  9 13:19:20 dnsmasq[1356]: query[A] web-mech01.mail.mil from 192.168.2.88
Jun  9 13:19:20 dnsmasq[1356]: forwarded web-mech01.mail.mil to 208.67.222.222
Jun  9 13:19:20 dnsmasq[1356]: forwarded web-mech01.mail.mil to 208.67.220.220
Jun  9 13:19:20 dnsmasq[1356]: reply web-mech01.mail.mil is 156.112.100.200
Jun  9 13:19:21 dnsmasq[1356]: query[A] admin.loveboxlove.com from 192.168.2.8
Jun  9 13:19:21 dnsmasq[1356]: cached admin.loveboxlove.com is <CNAME>
--
Jun  9 13:19:34 dnsmasq[1356]: query[A] www.arpc.afrc.af.mil from 192.168.2.88
Jun  9 13:19:34 dnsmasq[1356]: forwarded www.arpc.afrc.af.mil to 208.67.222.222
Jun  9 13:19:34 dnsmasq[1356]: query[A] www.arpc.afrc.af.mil from 192.168.2.88
Jun  9 13:19:34 dnsmasq[1356]: forwarded www.arpc.afrc.af.mil to 208.67.220.220
Jun  9 13:19:34 dnsmasq[1356]: forwarded www.arpc.afrc.af.mil to 208.67.222.222
Jun  9 13:19:34 dnsmasq[1356]: reply www.arpc.afrc.af.mil is <CNAME>
Jun  9 13:19:34 dnsmasq[1356]: reply www.afpw3.af.mil.edgekey.net is <CNAME>
Jun  9 13:19:34 dnsmasq[1356]: reply e9561.dscb.akamaiedge.net is 23.2.174.43
Jun  9 13:19:34 dnsmasq[1356]: query[A] agent.jumpcloud.com from 192.168.2.88
--
Jun  9 13:19:44 dnsmasq[1356]: query[A] www.445aw.afrc.af.mil from 192.168.2.88
Jun  9 13:19:44 dnsmasq[1356]: forwarded www.445aw.afrc.af.mil to 208.67.220.220
Jun  9 13:19:44 dnsmasq[1356]: query[A] www.445aw.afrc.af.mil from 192.168.2.88
Jun  9 13:19:44 dnsmasq[1356]: forwarded www.445aw.afrc.af.mil to 208.67.222.222
Jun  9 13:19:44 dnsmasq[1356]: forwarded www.445aw.afrc.af.mil to 208.67.220.220
Jun  9 13:19:44 dnsmasq[1356]: reply www.445aw.afrc.af.mil is <CNAME>
Jun  9 13:19:44 dnsmasq[1356]: reply www.afpw3.af.mil.edgekey.net is <CNAME>
Jun  9 13:19:44 dnsmasq[1356]: reply e9561.dscb.akamaiedge.net is 23.2.174.43
Jun  9 13:19:44 dnsmasq[1356]: query[A] fonts.googleapis.com from 192.168.2.88
--
Jun  9 13:19:51 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:19:51 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.220.220
Jun  9 13:19:51 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:19:51 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.222.222
Jun  9 13:19:51 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.220.220
Jun  9 13:19:51 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:19:51 dnsmasq[1356]: query[A] archive.org from 192.168.2.88
--
Jun  9 13:19:56 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:19:56 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.220.220
Jun  9 13:19:56 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:19:56 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.222.222
Jun  9 13:19:56 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.220.220
Jun  9 13:19:56 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:19:56 dnsmasq[1356]: query[A] watson.telemetry.microsoft.com from 192.168.2.88
--
Jun  9 13:20:04 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:20:04 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.220.220
Jun  9 13:20:04 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:20:04 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.222.222
Jun  9 13:20:04 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.220.220
Jun  9 13:20:05 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:20:05 dnsmasq[1356]: query[A] google.com from 192.168.2.88
--
Jun  9 13:20:09 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:20:09 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.222.222
Jun  9 13:20:09 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:20:09 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.220.220
Jun  9 13:20:09 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.222.222
Jun  9 13:20:09 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:20:09 dnsmasq[1356]: query[A] watson.telemetry.microsoft.com from 192.168.2.88
--
Jun  9 13:21:39 dnsmasq[1356]: query[A] web-mech01.mail.mil from 192.168.2.88
Jun  9 13:21:39 dnsmasq[1356]: forwarded web-mech01.mail.mil to 208.67.220.220
Jun  9 13:21:39 dnsmasq[1356]: query[A] web-mech01.mail.mil from 192.168.2.88
Jun  9 13:21:39 dnsmasq[1356]: forwarded web-mech01.mail.mil to 208.67.222.222
Jun  9 13:21:39 dnsmasq[1356]: forwarded web-mech01.mail.mil to 208.67.220.220
Jun  9 13:21:39 dnsmasq[1356]: reply web-mech01.mail.mil is 156.112.100.200
Jun  9 13:21:41 dnsmasq[1356]: query[A] watson.telemetry.microsoft.com from 192.168.2.88
Jun  9 13:21:41 dnsmasq[1356]: gravity blocked watson.telemetry.microsoft.com is 192.168.2.196
--
Jun  9 13:21:56 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:21:56 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.220.220
Jun  9 13:21:56 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:21:56 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.222.222
Jun  9 13:21:56 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.220.220
Jun  9 13:21:56 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:21:57 dnsmasq[1356]: query[A] google.com from 192.168.2.88
--
Jun  9 13:22:05 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:22:05 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.222.222
Jun  9 13:22:05 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:22:05 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.220.220
Jun  9 13:22:05 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.222.222
Jun  9 13:22:05 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:22:05 dnsmasq[1356]: query[A] google.com from 192.168.2.88
--
Jun  9 13:22:27 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:22:27 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.222.222
Jun  9 13:22:27 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:22:27 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.220.220
Jun  9 13:22:27 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.222.222
Jun  9 13:22:27 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:22:27 dnsmasq[1356]: query[A] google.com from 192.168.2.88
--
Jun  9 13:36:12 dnsmasq[1356]: query[A] www.my.af.mil from 192.168.2.88
Jun  9 13:36:12 dnsmasq[1356]: forwarded www.my.af.mil to 208.67.220.220
Jun  9 13:36:12 dnsmasq[1356]: reply safebrowsing.google.com is <CNAME>
Jun  9 13:36:12 dnsmasq[1356]: reply sb.l.google.com is 172.217.8.14
--
Jun  9 13:36:13 dnsmasq[1356]: reply www.my.af.mil is <CNAME>
Jun  9 13:36:13 dnsmasq[1356]: reply www.my.af.mil.apps.gcds.disa.mil is <CNAME>
Jun  9 13:36:13 dnsmasq[1356]: reply www.my.af.mil.edgekey.net is <CNAME>
Jun  9 13:36:13 dnsmasq[1356]: reply e213.dscna.akamaiedge.net is 172.231.35.33
Jun  9 13:36:13 dnsmasq[1356]: query[A] federation.prod.cce.af.mil from 192.168.2.88
Jun  9 13:36:13 dnsmasq[1356]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 13:36:13 dnsmasq[1356]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 13:36:13 dnsmasq[1356]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 13:36:13 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:36:14 dnsmasq[1356]: query[A] archive.org from 192.168.2.88
--
Jun  9 13:36:19 dnsmasq[1356]: query[A] federation.prod.cce.af.mil from 192.168.2.88
Jun  9 13:36:19 dnsmasq[1356]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 13:36:19 dnsmasq[1356]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 13:36:19 dnsmasq[1356]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 13:36:19 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:36:19 dnsmasq[1356]: query[A] google.com from 192.168.2.88
--
Jun  9 13:40:09 dnsmasq[1356]: query[A] federatioj.prod.cce.af.mil from 127.0.0.1
Jun  9 13:40:09 dnsmasq[1356]: forwarded federatioj.prod.cce.af.mil to 208.67.222.222
Jun  9 13:40:09 dnsmasq[1356]: reply federatioj.prod.cce.af.mil is NXDOMAIN
Jun  9 13:40:10 dnsmasq[1356]: query[A] www.googleapis.com from 192.168.2.88
Jun  9 13:40:10 dnsmasq[1356]: forwarded www.googleapis.com to 208.67.222.222
--
Jun  9 13:45:49 dnsmasq[1388]: query[A] federation.prod.cce.af.mil from 192.168.2.88
Jun  9 13:45:49 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 13:45:49 dnsmasq[1388]: query[A] federation.prod.cce.af.mil from 192.168.2.88
Jun  9 13:45:49 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 13:45:49 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 13:45:49 dnsmasq[1388]: reply error is SERVFAIL
Jun  9 13:45:49 dnsmasq[1388]: query[A] archive.org from 192.168.2.88
--
Jun  9 13:46:09 dnsmasq[1388]: query[A] www.my.af.mil from 192.168.2.88
Jun  9 13:46:09 dnsmasq[1388]: forwarded www.my.af.mil to 208.67.220.220
Jun  9 13:46:09 dnsmasq[1388]: reply www.my.af.mil is <CNAME>
Jun  9 13:46:09 dnsmasq[1388]: reply www.my.af.mil.apps.gcds.disa.mil is <CNAME>
Jun  9 13:46:09 dnsmasq[1388]: reply www.my.af.mil.edgekey.net is <CNAME>
Jun  9 13:46:09 dnsmasq[1388]: reply e213.dscna.akamaiedge.net is 23.208.37.52
Jun  9 13:46:09 dnsmasq[1388]: query[A] federation.prod.cce.af.mil from 192.168.2.88
Jun  9 13:46:09 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 13:46:10 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 13:46:10 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 13:46:10 dnsmasq[1388]: reply error is SERVFAIL
Jun  9 13:46:10 dnsmasq[1388]: query[A] google.com from 192.168.2.88
--
Jun  9 13:46:15 dnsmasq[1388]: query[A] federation.prod.cce.af.mil from 192.168.2.88
Jun  9 13:46:15 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 13:46:15 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 13:46:15 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 13:46:15 dnsmasq[1388]: reply error is SERVFAIL
Jun  9 13:46:15 dnsmasq[1388]: query[A] google.com from 192.168.2.88
--
Jun  9 13:48:29 dnsmasq[1388]: query[A] owa.us.af.mil from 192.168.2.88
Jun  9 13:48:29 dnsmasq[1388]: forwarded owa.us.af.mil to 208.67.222.222
Jun  9 13:48:30 dnsmasq[1388]: forwarded owa.us.af.mil to 208.67.220.220
Jun  9 13:48:30 dnsmasq[1388]: forwarded owa.us.af.mil to 208.67.222.222
Jun  9 13:48:30 dnsmasq[1388]: reply error is SERVFAIL
Jun  9 13:48:30 dnsmasq[1388]: query[A] archive.org from 192.168.2.88
--
Jun  9 13:48:35 dnsmasq[1388]: query[A] owa.us.af.mil from 192.168.2.88
Jun  9 13:48:35 dnsmasq[1388]: forwarded owa.us.af.mil to 208.67.222.222
Jun  9 13:48:35 dnsmasq[1388]: forwarded owa.us.af.mil to 208.67.220.220
Jun  9 13:48:35 dnsmasq[1388]: forwarded owa.us.af.mil to 208.67.222.222
Jun  9 13:48:35 dnsmasq[1388]: reply error is SERVFAIL
Jun  9 13:48:35 dnsmasq[1388]: query[A] google.com from 192.168.2.88
--
Jun  9 13:49:51 dnsmasq[1388]: query[A] web-satx02.mail.mil from 192.168.2.88
Jun  9 13:49:51 dnsmasq[1388]: forwarded web-satx02.mail.mil to 208.67.222.222
Jun  9 13:49:51 dnsmasq[1388]: reply web-satx02.mail.mil is 156.112.68.61
Jun  9 13:49:56 dnsmasq[1388]: query[A] api-global.netflix.com from 192.168.2.11
Jun  9 13:49:56 dnsmasq[1388]: cached api-global.netflix.com is <CNAME>
--
Jun  9 14:32:41 dnsmasq[1388]: query[A] js.smile.io from 192.168.2.217
Jun  9 14:32:41 dnsmasq[1388]: forwarded js.smile.io to 208.67.222.222
Jun  9 14:32:42 dnsmasq[1388]: query[A] static.klaviyo.com from 192.168.2.217
Jun  9 14:32:42 dnsmasq[1388]: forwarded static.klaviyo.com to 208.67.222.222
--
Jun  9 14:32:42 dnsmasq[1388]: reply js.smile.io is <CNAME>
Jun  9 14:32:42 dnsmasq[1388]: reply d3g3lh4ax0kkst.cloudfront.net is 54.192.30.29
Jun  9 14:32:42 dnsmasq[1388]: reply d3g3lh4ax0kkst.cloudfront.net is 54.192.30.81
--
Jun  9 14:32:42 dnsmasq[1388]: query[A] platform.smile.io from 192.168.2.217
Jun  9 14:32:42 dnsmasq[1388]: forwarded platform.smile.io to 208.67.222.222
Jun  9 14:32:42 dnsmasq[1388]: query[A] smile-ui.smilecdn.co from 192.168.2.217
Jun  9 14:32:42 dnsmasq[1388]: forwarded smile-ui.smilecdn.co to 208.67.222.222
Jun  9 14:32:42 dnsmasq[1388]: query[A] qab.hextom.com from 192.168.2.217
Jun  9 14:32:42 dnsmasq[1388]: forwarded qab.hextom.com to 208.67.222.222
Jun  9 14:32:42 dnsmasq[1388]: reply platform.smile.io is <CNAME>
Jun  9 14:32:42 dnsmasq[1388]: reply dvehf9khj8l8h.cloudfront.net is 99.84.181.22
Jun  9 14:32:42 dnsmasq[1388]: reply dvehf9khj8l8h.cloudfront.net is 99.84.181.54
--
Jun  9 14:32:42 dnsmasq[1388]: reply smile-ui.smilecdn.co is <CNAME>
Jun  9 14:32:42 dnsmasq[1388]: reply d248r3jfzv8zu2.cloudfront.net is 54.192.30.52
Jun  9 14:32:42 dnsmasq[1388]: reply d248r3jfzv8zu2.cloudfront.net is 54.192.30.91
--
Jun  9 14:32:44 dnsmasq[1388]: query[A] web-analytics.smile.io from 192.168.2.217
Jun  9 14:32:44 dnsmasq[1388]: forwarded web-analytics.smile.io to 208.67.222.222
Jun  9 14:32:44 dnsmasq[1388]: reply web-analytics.smile.io is <CNAME>
Jun  9 14:32:44 dnsmasq[1388]: reply fitted-tiger-zkfrk3mkxehlagfdjtvysrzo.herokudns.com is 54.152.45.100
Jun  9 14:32:44 dnsmasq[1388]: reply fitted-tiger-zkfrk3mkxehlagfdjtvysrzo.herokudns.com is 54.161.19.10
--
Jun  9 15:22:52 dnsmasq[1388]: query[A] www.my.af.mil from 192.168.2.143
Jun  9 15:22:52 dnsmasq[1388]: forwarded www.my.af.mil to 208.67.220.220
Jun  9 15:22:53 dnsmasq[1388]: reply www.my.af.mil is <CNAME>
Jun  9 15:22:53 dnsmasq[1388]: reply www.my.af.mil.apps.gcds.disa.mil is <CNAME>
Jun  9 15:22:53 dnsmasq[1388]: reply www.my.af.mil.edgekey.net is <CNAME>
Jun  9 15:22:53 dnsmasq[1388]: reply e213.dscna.akamaiedge.net is 23.45.20.145
Jun  9 15:22:54 dnsmasq[1388]: query[A] api-global.netflix.com from 192.168.2.11
--
Jun  9 15:22:57 dnsmasq[1388]: query[A] federation.prod.cce.af.mil from 192.168.2.143
Jun  9 15:22:57 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 15:22:57 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 15:22:57 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 15:22:57 dnsmasq[1388]: reply error is SERVFAIL
Jun  9 15:22:57 dnsmasq[1388]: query[A] federation.prod.cce.af.mil from 192.168.2.143
Jun  9 15:22:57 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 15:22:58 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 15:22:58 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 15:22:58 dnsmasq[1388]: reply error is SERVFAIL
Jun  9 15:22:58 dnsmasq[1388]: query[A] federation.prod.cce.af.mil.gravitywall from 192.168.2.143
Jun  9 15:22:58 dnsmasq[1388]: forwarded federation.prod.cce.af.mil.gravitywall to 208.67.222.222
Jun  9 15:22:58 dnsmasq[1388]: reply federation.prod.cce.af.mil.gravitywall is NXDOMAIN
Jun  9 15:22:58 dnsmasq[1388]: query[A] google.com from 192.168.2.143
Jun  9 15:22:58 dnsmasq[1388]: cached google.com is 172.217.12.238
Jun  9 15:22:58 dnsmasq[1388]: query[A] federation.prod.cce.af.mil from 192.168.2.143
Jun  9 15:22:58 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 15:22:58 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 15:22:58 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 15:22:58 dnsmasq[1388]: reply error is SERVFAIL
Jun  9 15:22:58 dnsmasq[1388]: query[A] federation.prod.cce.af.mil from 192.168.2.143
Jun  9 15:22:58 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 15:22:58 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 15:22:58 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 15:22:58 dnsmasq[1388]: reply error is SERVFAIL
Jun  9 15:23:01 dnsmasq[1388]: query[A] www.gstatic.com from 71.179.105.215
--
Jun  9 20:28:29 dnsmasq[1388]: query[A] www.my.af.mil from 192.168.2.143
Jun  9 20:28:29 dnsmasq[1388]: forwarded www.my.af.mil to 208.67.222.222
Jun  9 20:28:30 dnsmasq[1388]: reply www.my.af.mil is <CNAME>
Jun  9 20:28:30 dnsmasq[1388]: reply www.my.af.mil.apps.gcds.disa.mil is <CNAME>
Jun  9 20:28:30 dnsmasq[1388]: reply www.my.af.mil.edgekey.net is <CNAME>
Jun  9 20:28:30 dnsmasq[1388]: reply e213.dscna.akamaiedge.net is 23.214.80.90
Jun  9 20:28:30 dnsmasq-dhcp[1388]: DHCPDISCOVER(eth0) 1c:f2:9a:be:c1:fa
--
Jun  9 20:28:31 dnsmasq[1388]: query[A] federation.prod.cce.af.mil from 192.168.2.143
Jun  9 20:28:31 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 20:28:31 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 20:28:31 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 20:28:31 dnsmasq[1388]: reply error is SERVFAIL
Jun  9 20:28:31 dnsmasq[1388]: query[A] federation.prod.cce.af.mil from 192.168.2.143
Jun  9 20:28:31 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 20:28:31 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 20:28:31 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 20:28:31 dnsmasq[1388]: reply error is SERVFAIL
Jun  9 20:28:31 dnsmasq[1388]: query[A] federation.prod.cce.af.mil.gravitywall from 192.168.2.143
Jun  9 20:28:31 dnsmasq[1388]: forwarded federation.prod.cce.af.mil.gravitywall to 208.67.222.222
Jun  9 20:28:31 dnsmasq[1388]: reply federation.prod.cce.af.mil.gravitywall is NXDOMAIN
Jun  9 20:28:32 dnsmasq[1388]: query[A] google.com from 192.168.2.143
Jun  9 20:28:32 dnsmasq[1388]: forwarded google.com to 208.67.222.222
--
Jun  9 20:28:32 dnsmasq[1388]: query[A] federation.prod.cce.af.mil from 192.168.2.143
Jun  9 20:28:32 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 20:28:32 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 20:28:32 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 20:28:32 dnsmasq[1388]: reply error is SERVFAIL
Jun  9 20:28:32 dnsmasq[1388]: query[A] federation.prod.cce.af.mil from 192.168.2.143
Jun  9 20:28:32 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 20:28:32 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 20:28:32 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 20:28:32 dnsmasq[1388]: reply error is SERVFAIL
Jun  9 20:28:35 dnsmasq[1388]: query[A] clients4.google.com from 192.168.2.88
--
Jun  9 20:28:37 dnsmasq[1388]: query[A] federation.prod.cce.af.mil from 192.168.2.143
Jun  9 20:28:37 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 20:28:37 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 20:28:37 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 20:28:37 dnsmasq[1388]: reply error is SERVFAIL
Jun  9 20:28:37 dnsmasq[1388]: query[A] federation.prod.cce.af.mil from 192.168.2.143
Jun  9 20:28:37 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 20:28:37 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 20:28:37 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 20:28:37 dnsmasq[1388]: reply error is SERVFAIL
Jun  9 20:28:37 dnsmasq[1388]: query[A] google.com from 192.168.2.143
--
Jun  9 20:28:38 dnsmasq[1388]: query[A] federation.prod.cce.af.mil from 192.168.2.143
Jun  9 20:28:38 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 20:28:38 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 20:28:38 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 20:28:38 dnsmasq[1388]: reply error is SERVFAIL
Jun  9 20:28:38 dnsmasq[1388]: query[A] federation.prod.cce.af.mil from 192.168.2.143
Jun  9 20:28:38 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 20:28:38 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 20:28:38 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 20:28:38 dnsmasq[1388]: reply error is SERVFAIL
Jun  9 20:28:42 dnsmasq[1388]: query[A] agent.jumpcloud.com from 192.168.2.88
pi@raspberrypi:~ $ sudo cat /var/log/pihole.log | grep -A2 af.mil
Jun  9 13:18:17 dnsmasq[1356]: query[A] owa.us.af.mil from 192.168.2.88
Jun  9 13:18:17 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.222.222
Jun  9 13:18:17 dnsmasq[1356]: query[A] owa.us.af.mil from 192.168.2.88
Jun  9 13:18:17 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.220.220
Jun  9 13:18:17 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.222.222
Jun  9 13:18:17 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:18:17 dnsmasq[1356]: query[A] archive.org from 192.168.2.88
--
Jun  9 13:18:22 dnsmasq[1356]: query[A] owa.us.af.mil from 192.168.2.88
Jun  9 13:18:22 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.220.220
Jun  9 13:18:22 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.222.222
Jun  9 13:18:22 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.220.220
Jun  9 13:18:22 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:18:22 dnsmasq[1356]: query[A] google.com from 192.168.2.88
--
Jun  9 13:18:27 dnsmasq[1356]: query[A] owa.us.af.mil from 192.168.2.88
Jun  9 13:18:27 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.220.220
Jun  9 13:18:27 dnsmasq[1356]: query[A] owa.us.af.mil from 192.168.2.88
Jun  9 13:18:27 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.222.222
Jun  9 13:18:27 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.220.220
Jun  9 13:18:27 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:18:27 dnsmasq[1356]: query[A] google.com from 192.168.2.88
--
Jun  9 13:18:41 dnsmasq[1356]: query[A] owa.us.af.mil from 192.168.2.88
Jun  9 13:18:41 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.222.222
Jun  9 13:18:41 dnsmasq[1356]: query[A] owa.us.af.mil from 192.168.2.88
Jun  9 13:18:41 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.220.220
Jun  9 13:18:41 dnsmasq[1356]: forwarded owa.us.af.mil to 208.67.222.222
Jun  9 13:18:41 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:18:41 dnsmasq[1356]: query[A] nav.smartscreen.microsoft.com from 192.168.2.88
--
Jun  9 13:19:16 dnsmasq[1356]: query[A] my.af.mil from 192.168.2.88
Jun  9 13:19:16 dnsmasq[1356]: forwarded my.af.mil to 208.67.220.220
Jun  9 13:19:16 dnsmasq[1356]: query[A] my.af.mil from 192.168.2.88
Jun  9 13:19:16 dnsmasq[1356]: forwarded my.af.mil to 208.67.222.222
Jun  9 13:19:16 dnsmasq[1356]: forwarded my.af.mil to 208.67.220.220
Jun  9 13:19:16 dnsmasq[1356]: reply my.af.mil is 164.235.24.208
Jun  9 13:19:16 dnsmasq[1356]: reply my.af.mil is 164.235.4.208
Jun  9 13:19:17 dnsmasq[1356]: query[A] watson.telemetry.microsoft.com from 192.168.2.88
Jun  9 13:19:17 dnsmasq[1356]: gravity blocked watson.telemetry.microsoft.com is 192.168.2.196
--
Jun  9 13:19:34 dnsmasq[1356]: query[A] www.arpc.afrc.af.mil from 192.168.2.88
Jun  9 13:19:34 dnsmasq[1356]: forwarded www.arpc.afrc.af.mil to 208.67.222.222
Jun  9 13:19:34 dnsmasq[1356]: query[A] www.arpc.afrc.af.mil from 192.168.2.88
Jun  9 13:19:34 dnsmasq[1356]: forwarded www.arpc.afrc.af.mil to 208.67.220.220
Jun  9 13:19:34 dnsmasq[1356]: forwarded www.arpc.afrc.af.mil to 208.67.222.222
Jun  9 13:19:34 dnsmasq[1356]: reply www.arpc.afrc.af.mil is <CNAME>
Jun  9 13:19:34 dnsmasq[1356]: reply www.afpw3.af.mil.edgekey.net is <CNAME>
Jun  9 13:19:34 dnsmasq[1356]: reply e9561.dscb.akamaiedge.net is 23.2.174.43
Jun  9 13:19:34 dnsmasq[1356]: query[A] agent.jumpcloud.com from 192.168.2.88
--
Jun  9 13:19:44 dnsmasq[1356]: query[A] www.445aw.afrc.af.mil from 192.168.2.88
Jun  9 13:19:44 dnsmasq[1356]: forwarded www.445aw.afrc.af.mil to 208.67.220.220
Jun  9 13:19:44 dnsmasq[1356]: query[A] www.445aw.afrc.af.mil from 192.168.2.88
Jun  9 13:19:44 dnsmasq[1356]: forwarded www.445aw.afrc.af.mil to 208.67.222.222
Jun  9 13:19:44 dnsmasq[1356]: forwarded www.445aw.afrc.af.mil to 208.67.220.220
Jun  9 13:19:44 dnsmasq[1356]: reply www.445aw.afrc.af.mil is <CNAME>
Jun  9 13:19:44 dnsmasq[1356]: reply www.afpw3.af.mil.edgekey.net is <CNAME>
Jun  9 13:19:44 dnsmasq[1356]: reply e9561.dscb.akamaiedge.net is 23.2.174.43
Jun  9 13:19:44 dnsmasq[1356]: query[A] fonts.googleapis.com from 192.168.2.88
--
Jun  9 13:19:51 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:19:51 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.220.220
Jun  9 13:19:51 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:19:51 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.222.222
Jun  9 13:19:51 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.220.220
Jun  9 13:19:51 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:19:51 dnsmasq[1356]: query[A] archive.org from 192.168.2.88
--
Jun  9 13:19:56 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:19:56 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.220.220
Jun  9 13:19:56 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:19:56 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.222.222
Jun  9 13:19:56 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.220.220
Jun  9 13:19:56 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:19:56 dnsmasq[1356]: query[A] watson.telemetry.microsoft.com from 192.168.2.88
--
Jun  9 13:20:04 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:20:04 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.220.220
Jun  9 13:20:04 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:20:04 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.222.222
Jun  9 13:20:04 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.220.220
Jun  9 13:20:05 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:20:05 dnsmasq[1356]: query[A] google.com from 192.168.2.88
--
Jun  9 13:20:09 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:20:09 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.222.222
Jun  9 13:20:09 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:20:09 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.220.220
Jun  9 13:20:09 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.222.222
Jun  9 13:20:09 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:20:09 dnsmasq[1356]: query[A] watson.telemetry.microsoft.com from 192.168.2.88
--
Jun  9 13:21:56 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:21:56 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.220.220
Jun  9 13:21:56 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:21:56 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.222.222
Jun  9 13:21:56 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.220.220
Jun  9 13:21:56 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:21:57 dnsmasq[1356]: query[A] google.com from 192.168.2.88
--
Jun  9 13:22:05 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:22:05 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.222.222
Jun  9 13:22:05 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:22:05 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.220.220
Jun  9 13:22:05 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.222.222
Jun  9 13:22:05 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:22:05 dnsmasq[1356]: query[A] google.com from 192.168.2.88
--
Jun  9 13:22:27 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:22:27 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.222.222
Jun  9 13:22:27 dnsmasq[1356]: query[A] afrc.eim.us.af.mil from 192.168.2.88
Jun  9 13:22:27 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.220.220
Jun  9 13:22:27 dnsmasq[1356]: forwarded afrc.eim.us.af.mil to 208.67.222.222
Jun  9 13:22:27 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:22:27 dnsmasq[1356]: query[A] google.com from 192.168.2.88
--
Jun  9 13:36:12 dnsmasq[1356]: query[A] www.my.af.mil from 192.168.2.88
Jun  9 13:36:12 dnsmasq[1356]: forwarded www.my.af.mil to 208.67.220.220
Jun  9 13:36:12 dnsmasq[1356]: reply safebrowsing.google.com is <CNAME>
Jun  9 13:36:12 dnsmasq[1356]: reply sb.l.google.com is 172.217.8.14
--
Jun  9 13:36:13 dnsmasq[1356]: reply www.my.af.mil is <CNAME>
Jun  9 13:36:13 dnsmasq[1356]: reply www.my.af.mil.apps.gcds.disa.mil is <CNAME>
Jun  9 13:36:13 dnsmasq[1356]: reply www.my.af.mil.edgekey.net is <CNAME>
Jun  9 13:36:13 dnsmasq[1356]: reply e213.dscna.akamaiedge.net is 172.231.35.33
Jun  9 13:36:13 dnsmasq[1356]: query[A] federation.prod.cce.af.mil from 192.168.2.88
Jun  9 13:36:13 dnsmasq[1356]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 13:36:13 dnsmasq[1356]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 13:36:13 dnsmasq[1356]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 13:36:13 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:36:14 dnsmasq[1356]: query[A] archive.org from 192.168.2.88
--
Jun  9 13:36:19 dnsmasq[1356]: query[A] federation.prod.cce.af.mil from 192.168.2.88
Jun  9 13:36:19 dnsmasq[1356]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 13:36:19 dnsmasq[1356]: forwarded federation.prod.cce.af.mil to 208.67.222.222
Jun  9 13:36:19 dnsmasq[1356]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 13:36:19 dnsmasq[1356]: reply error is SERVFAIL
Jun  9 13:36:19 dnsmasq[1356]: query[A] google.com from 192.168.2.88
--
Jun  9 13:40:09 dnsmasq[1356]: query[A] federatioj.prod.cce.af.mil from 127.0.0.1
Jun  9 13:40:09 dnsmasq[1356]: forwarded federatioj.prod.cce.af.mil to 208.67.222.222
Jun  9 13:40:09 dnsmasq[1356]: reply federatioj.prod.cce.af.mil is NXDOMAIN
Jun  9 13:40:10 dnsmasq[1356]: query[A] www.googleapis.com from 192.168.2.88
Jun  9 13:40:10 dnsmasq[1356]: forwarded www.googleapis.com to 208.67.222.222
--
Jun  9 13:45:49 dnsmasq[1388]: query[A] federation.prod.cce.af.mil from 192.168.2.88
Jun  9 13:45:49 dnsmasq[1388]: forwarded federation.prod.cce.af.mil to 208.67.220.220
Jun  9 13:45:49 dnsmasq[1388]: query[A] federation.prod.cce.af.mil from 192.168.2.88
27 
pi@raspberrypi:~ $ dig federation.prod.cce.af.mil

; <<>> DiG 9.10.3-P4-Raspbian <<>> federation.prod.cce.af.mil
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 30764
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;federation.prod.cce.af.mil.    IN      A

;; Query time: 137 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Jun 09 20:35:21 EDT 2020
;; MSG SIZE  rcvd: 55

pi@raspberrypi:~ $
28

It's the upstream.

dschaper@Mariner-10:~$ dig federation.prod.cce.af.mil @208.67.220.220

; <<>> DiG 9.16.1-Ubuntu <<>> federation.prod.cce.af.mil @208.67.220.220
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 49042
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;federation.prod.cce.af.mil.    IN      A

;; Query time: 720 msec
;; SERVER: 208.67.220.220#53(208.67.220.220)
;; WHEN: Tue Jun 09 17:35:47 PDT 2020
;; MSG SIZE  rcvd: 55

dschaper@Mariner-10:~$ dig federation.prod.cce.af.mil @8.8.8.8

; <<>> DiG 9.16.1-Ubuntu <<>> federation.prod.cce.af.mil @8.8.8.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34535
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;federation.prod.cce.af.mil.    IN      A

;; ANSWER SECTION:
federation.prod.cce.af.mil. 99  IN      CNAME   federation.prod.cce.af.mil.apps.gcds.disa.mil.
federation.prod.cce.af.mil.apps.gcds.disa.mil. 72 IN CNAME federation.prod.cce.af.mil.edgekey.dmz.akamai.csd.disa.mil.
federation.prod.cce.af.mil.edgekey.dmz.akamai.csd.disa.mil. 0 IN CNAME e1068.d.akamaiedge.akamai.csd.disa.mil.
e1068.d.akamaiedge.akamai.csd.disa.mil. 3 IN A  214.48.252.91

;; Query time: 50 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Tue Jun 09 17:36:02 PDT 2020
;; MSG SIZE  rcvd: 224
29

So switching to something like Cloudflare should fix it?

30

Try and see, can't hurt anything.

31

I just set it to Quad9 and now it works. Thanks for the help.

I'll submit a trouble ticket to Cisco with this discussion as evidence.

Thanks again!

34

Follow up from Cisco and OpenDNS

Thank you for contacting us. Apologies for the delay in response as we have been receiving a high volume of tickets lately.

There was an issue last week where Umbrella DNS resolvers were returning a SERVFAIL response for a number of .mil domains as they were failing DNSSEC validation. Please note that in testing we found a number of third-party services were also failing to resolve dibbs.bsm.dla.mil and other .mil domains, including instances of DNS.WATCH, Sprint, Mundivox LTDA, Cloudflare Inc Quad9.

Our Engineering team have made exclusions for DNSSEC validation of '.mil' so the '.mil' domains should now be resolving for you correctly.

Please let us know if you face any further issues.

Best regards,

Veno Senthil
Customer Support Team Lead (EMEA)
Cisco OpenDNS LLC.

36

Yeah, they turned off DNSSEC verification for the .mil TLD. (Not sure that's a great move...)